ThreatVectr
Tag

#UNC6671

3 stories taggedUNC6671.

A corporate office phone bank or IT support desk with employees at workstations, with floating data fragments like names and numbers emerging from the screens
Identity & Access

Apollo Global Hit by Social Engineering Attack That Exposed Names and Social Security Numbers

A phone-based scam tricked Apollo Global Management's IT support staff into handing over access. Names, contact details, and Social Security numbers may have been stolen.

3 min read
An office worker at a desk receiving a phishing email or message on their computer, with a shadowy figure visible through the monitor representing the attacker
Breaches

Levi's Says Hackers Talked Three Staff Into Handing Over Access

The denim giant told the SEC that attackers used social engineering on three employees to break into company laptops and steal corporate files. No customer data hit, Levi's says.

3 min read
A telephone headset positioned next to a computer screen displaying cloud account access logs, representing the vishing attacks that preceded data theft from ma
Threat Intelligence

Hedge Fund Vishing Attacks Traced to UNC6671, the Group Behind the BlackFile Brand

Google's threat researchers say one core crew is running help-desk phone scams that have hit Point72, Citadel, Two Sigma and Millennium, then stealing data straight from their cloud accounts.

4 min read
© 2026 Threat Vectr